Privacy Statement

This Privacy Statement (“Privacy Statement”) applies to any services or programs delivered, in whole or in part, through websites, mobile apps, online or mobile-enabled technology or digital tools (collectively, our “Programs”) that display or link to these terms or which are governed by certain Terms of Use which reference this Privacy Statement. We wrote this Privacy Statement to help you understand what information we collect, how we use it, what choices you have and other important information regarding the use of information collected through our Programs. Johns Hopkins HealthCare LLC and its affiliated entities are referred to collectively, as “Johns Hopkins,” “we,” “us,” or “our.” As used in this Privacy Statement, the words “you” and “your” mean a user of the Programs.

If you have any questions or comments about this Privacy Statement or the ways in which Johns Hopkins uses the information we collect online, please do not hesitate to contact us using the information provided in the Contact Us section at the bottom of this statement.

Scope & Application

This Privacy Statement applies to information collected through the Programs. This Privacy Statement also applies to information shared with us by our approved partners and other third-party sources related to the Programs.

This Privacy Statement does not apply to (i) information collected from you offline or through websites and other online services that do not display or link to this Privacy Statement, or (ii) information that would be considered “Protected Health Information” under HIPAA.

Collection and Use of Information

We collect and combine information about you, how you engage with our Programs, and the devices you use to view and interact with our Programs for the legitimate purposes described below. This includes information you provide to us and information collected automatically when you view and interact with our Programs.

Information You Provide to Us

We collect information you provide directly to us. This information may include your name, e-mail address, phone number, postal address, insurance information, personal health information, survey responses, and other information you choose to provide in connection with your participation in a Program.

The information you provide to us will be used to (i) set up your account; (ii) if you elect to receive information from Johns Hopkins to provide you with such information; (iii) to improve the Program, including certain websites and other online services; and (iv) to fulfill any other purpose for which you provided it.

We are committed to your privacy, and we will not use your information for any purposes other than as set forth herein or explained to you at the point at which the information was collected.

Information Collected Automatically

We also utilize Google Analytics, a web analysis service provided by Google, in order to better understand your use of our Programs. Google Analytics collects information such as how often you participate in, or otherwise interact with, a Program (for example, the number of times a user visits the Program website), what pages you visit and what other sites you may have used prior to visiting. Google uses the data collected to track and examine the use of the Programs, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network. Google’s ability to use and share information collected by Google Analytics about your visits to the Program website are restricted by the Google Analytics Terms of Use and the Google Privacy Policy. Google offers an opt-out mechanism for the web available here.

We may automatically collect additional information about your visit to our Program websites, including pages you visit, your geographic location based solely on your IP address unless otherwise approved by you. This information is collected for the sole purpose of improving our Program and your Program experience. This data is not shared with any third party. The data may also be used to provide interest-based content for communications for which you have opted in.

We may also gather certain information automatically, including but not limited to, internet protocol (IP) addresses, browser type, internet service provider (ISP), operating system, date/time stamp, mobile location and device type, and/or clickstream data. This information may be linked to other information we collect about you. Cookies, web beacons, flash cookies and similar technologies serve many important functions that help us serve you better.

Managing Cookies and Similar Technologies

Cookies, web beacons, Flash cookies and similar technologies serve many important functions that help us serve you better. However, you have a variety of tools to manage cookies and similar technologies, including:

Visiting the Digital Advertising Alliance’s opt-out page here to opt out from receiving third party advertiser cookies;

For information on how to manage privacy and storage settings for Flash cookies, click here.

Please note, disabling, removing or blocking cookies may turn off some of the features of our Programs that make your experience more efficient, and some components of the Program may not function properly.

Sharing of Information

We may share the information described above as set forth in this Privacy Statement or as otherwise described at the time such information is collected from you.

Information Shared by Us

Affiliates. We may share information with a parent, subsidiary or affiliate entity within the Johns Hopkins family. Any organization to which we provide such information is required to keep it confidential and to only use such information in accordance with this Privacy Statement.

Service Providers. In the course of doing business, including the offering of the Programs, we employ other companies and individuals to perform a variety of functions on our behalf. For example, we may provide information as necessary to companies that host our online services or send communications on our behalf. These service providers may have access to information about you if it is needed to perform their functions for us, but they are not authorized by us to use or disclose such information except as necessary to perform services on our behalf or to comply with legal requirements, and they are required to maintain the information in confidence.

Legally Required. We reserve the right to disclose information if required to do so by law or by a regulatory authority. We may also disclose information as part of an investigation or enforcement action relating to improper or illegal conduct in connection with our online services or other products, including, without limitation, any situations that may potentially involve threats to the safety or privacy of any person or misuse of our online services.

Sale or Bankruptcy. During the normal course of our business, Johns Hopkins may sell or purchase assets. If another entity acquires us or any of our assets, the information described in this Privacy Statement may be transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, such information may be considered an asset of ours and may be sold or transferred to third parties. Should such a sale or transfer occur, we will use reasonable efforts to try to require that the transferee use such information in a manner that is consistent with this Privacy Statement.

Aggregated and Non-Identified Data. John Hopkins may maintain aggregate data or other non-identified information (i.e., data that does not identify a specific individual), such as usage statistics, device data, online traffic patterns and user feedback. In addition to using this information for the purposes discussed in this Privacy Statement, we may disclose such aggregated or non-identified data to third parties without restriction.

Your Employer. The information we collect about you through the Programs will be shared with your employer only in a de-identified, aggregated report, which will not identify you individually in any manner.

Security

We take precautions to protect your information. When you submit sensitive information via a Program, your information is protected both online and offline. Wherever we collect sensitive information, that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a closed lock icon at the bottom of your web browser, or looking for “https” at the beginning of the address of the web page. While we use encryption to protect sensitive information transmitted online, we also protect your information offline. But you should keep in mind that no Internet transmission is ever completely secure or error-free.

PLEASE NOTE: The safety and security of your information also depends on you. If you create or receive a password in connection with the use of a Program, you should never share your password with anyone else. Notify us promptly if you believe your password security has been breached, and remember to log off of the Program before you leave your computer or mobile device.

This website may offer opportunities to communicate with Johns Hopkins through email. Because normal email is not encrypted, the possibility exists that unauthorized individuals may intercept email messages with Johns Hopkins. Johns Hopkins is not responsible for the privacy of e-mail messages except those stored in our system.

COPPA (Children’s Online Privacy Protection Act)

We do not knowingly collect or use any personal information from children (we define “children” as minors younger than 13) in our Programs. We do not knowingly allow children to communicate with us, or use any of our Programs.

California Privacy Rights

Under California law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of personal information, such as name, email, and mailing address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes and (b) the name and address of all such third parties. To request the above information, please email us at: hipaa@jhmi.edu with a reference to California Disclosure Information. Please note that we are only required to respond to each customer once per calendar year.

Visiting The Site From Outside The United States

The Programs are directed only at customers in the United States. If you are visiting the Program sites from outside of the United States of America, please be aware that your information may be transferred to, stored or processed in the United States. By using any portion of a Program, you understand and consent to the transfer of your information to the United States and those third parties with whom we share it as described in this Privacy Statement.

Acceptance of these terms

This Privacy Statement is incorporated into and subject to the terms of the Johns Hopkins Terms of Use. Each time that you use a Program, you signify that you have read, understood and agree to be bound by the Terms of Use, which incorporate this Privacy Statement in its then-current form. If you do not agree to the terms of this Privacy Statement, please do not use the Program.

Updates

WE RESERVE THE RIGHT TO MODIFY THIS PRIVACY STATEMENT AT ANY TIME. ALL UPDATES WILL BE POSTED ON THIS PAGE, SO PLEASE REVIEW IT PERIODICALLY. YOUR CONTINUED USE OF THE PROGRAM SUBSEQUENT TO ANY CHANGES IN THIS PRIVACY STATEMENT WILL SIGNIFY YOUR ACCEPTANCE OF THE CHANGES.

Reservation of Rights

By using our Programs, you consent, and we reserve the right, to use the data we collect from you as described in this Privacy Statement. Additionally, you consent, and we reserve the right, to use the data we collect from you in ways that are consistent with the then-current disclosed Privacy Statement regardless of when your data was collected (i.e., we can use your data in ways that are consistent with the current disclosed practice but which may not be entirely consistent with the previously disclosed practices when your information was originally collected).